Wikipedia:Requests for checkuser

Read this first This is the place to request sockpuppet checks and other investigations requiring access to the Checkuser privilege. Possible alternatives are listed below. Requests likely to be accepted Code Situation Solution, requirements A Blatant attack or vandalism accounts, need IP block Submit new section at #Requests for IP check, below B Evading blocks, bans and remedies issued by arbitration committee Submit case subpage, including link to closed arb case C Ongoing, serious pattern vandalism with many incidents Submit case subpage, including diffs D Vote fraud, closed vote, fraud affects outcome Submit case subpage, including link to closed vote E 3RR violation using sockpuppets Submit case subpage, including diffs of violation F Evading blocks, bans and remedies issued by community Submit case subpage, including link to evidence of remedy G Does not fit above, but you believe check needed Submit case subpage, briefly summarize and justify Requests likely to be rejected Situation Solution Obvious, disruptive sock puppet Block, no checkuser needed Disruptive "throwaway" account used only for a few edits Block, no checkuser needed Checkuser on yourself to "prove your innocence" Such requests are rarely accepted, please do not ask Related to ongoing arbitration case Request checkuser on the arbitration case pages Vote fraud, ongoing vote Wait until vote closes before listing, or post at Wikipedia:Suspected sock puppets Vote fraud, closed vote, did not affect outcome List at Wikipedia:Administrators' noticeboard/Incidents or Wikipedia:Suspected sock puppets Other disruption of articles List at Wikipedia:Administrators' noticeboard/Incidents or Wikipedia:Suspected sock puppets Open proxy, IP address already known List at Wikipedia:WikiProject on open proxies You want access to the checkuser tool yourself Contact the Arbitration Committee, but such access is granted rarely When submitting a request If submitting a new case subpage, use the inputbox below; if adding to an existing case subpage, see WP:RFCU/P#Repeat requests. Choose the code letter that best fits your request. Provide evidence such as diff links as required or requested. Note that some code letters inherently require specific evidence. When listing suspected accounts or IP addresses, use the {{checkuser}} or {{checkip}} templates. Please do not use this template in a section header. You may add your request to the top of the #Outstanding requests section, by adding {{Wikipedia:Requests for checkuser/Case/CASENAMEHERE}}. If you do not, clerks should check for pages in Category:Checkuser requests to be listed and will do this for you. Sign your request. After submitting a request Purge cache Checkuser clerks assist with maintenance of the page but do not directly respond to checkuser requests. If you need help, post at Wikipedia talk:Requests for checkuser. Responses will be brief in order to comply with Wikipedia's privacy policy. Likewise, the privacy policy often prevents us from running a check which has the effect of revealing IP addresses. Due to technical factors, results are not always clear. Check back regularly to see the outcome of your request. Checkusers and clerks do not generally issue blocks. You may need to do this yourself or submit a request at Wikipedia:Administrators' noticeboard/Incidents. Case subpages are typically archived several days after a checkuser responds. More procedures at Wikipedia:Requests for checkuser/Procedures. Privacy violation? If you feel that a checkuser has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombudsman commission.

this header: view • edit

File a Checkuser Request

Cases are created on subpages of Wikipedia:Requests for checkuser/Case. If you require help or advice, ask at Wikipedia talk:Requests for checkuser. If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top (if the case has been archived). When editing an existing case, be sure to list it here or add Category:Checkuser requests to be listed to the subpage. If creating a new case subpage, add the name of the main account (or "puppetmaster", not the sockpuppet!) in the box below. Leave out the "User:" prefix. Do not remove the text in the box, add the name to the end only (that is, append the name to the existing text). Then press "Request a checkuser" and you will be taken to a page where you can fill out the request. Example: if you want to request a checkuser on User:John Doe, enter the text: Wikipedia:Requests for checkuser/Case/John Doe <inputbox> type=create editintro=Wikipedia:Requests for checkuser/Inputbox/Header preload=Wikipedia:Requests for checkuser/Inputbox/Sample default=Wikipedia:Requests for checkuser/Case/ buttonlabel=Request a checkuser bgcolor=#F8FCFF width=50 </inputbox>

Indicators and templates   (v  · e)
These indicators are used by Checkusers, SPI clerks and other patrolling users, to allow easier at-a-glance reading of their notes, actions and comments.
Case decisions:
IP blocked  {{IPblock}}	Tagged  {{Stagged}}
Blocked but awaiting tags  {{Sblock}}	Not possible  {{Impossible}}
Blocked and tagged  {{Blockedandtagged}}	Blocked without tags  {{Blockedwithouttags}}
No tags  {{No tags}}	Blocked and tagged. Closing.  {{Blockedtaggedclosing}}
Information:
Additional information needed  {{MoreInfo}}	Deferred  {{Deferred}}
Note:  {{TakeNote}}	In progress  {{Inprogress}}
Clerk actions:
Clerk assistance requested:  {{Clerk Request}}	Clerk note:  {{Clerk-Note}}
Delisted  {{Delisted}}	Relisted  {{Relisted}}
Clerk declined  {{Decline}}	Clerk endorsed  {{Endorse}}
Self-endorsed by clerk for checkuser attention  {{Selfendorse}}	CheckUser requested  {{CURequest}}
Specific to CheckUser:
Confirmed  {{Confirmed}}	Unrelated  {{Unrelated}}
Confirmed with respect to the named user(s).  No comment with respect to IP address(es).  {{Confirmed-nc}}
Technically indistinguishable  {{Technically indistinguishable}}
Likely  {{Likely}}	Unlikely  {{Unlikely}}
Possible  {{Possible}}	Inconclusive  {{Inconclusive}}
Declined  {{Declined}}	Unnecessary  {{Unnecessary}}
Stale (too old)  {{StaleIP}}	No comment  {{Nocomment}}
CheckUser is not a crystal ball  {{Crystalball}}	CheckUser is not for fishing  {{Fishing}}
CheckUser is not magic pixie dust  {{Pixiedust}}	The CheckUser Magic 8-Ball says:  {{8ball}}
Endorsed by a checkuser  {{Cu-endorsed}}	Check declined by a checkuser  {{Cudecline}}
Possilikely (a mix between possible and likely)  {{possilikely}}

Enter requests below:

Bishonen and Geogre

I am seriously convinced that Bishonen and Geogre are sock puppet accounts of each other. This is judged by their contributions, which are interestingly made accordingly to one another's, with one editing, then the next editing much later, and then the next (presumably gapping the time to avoid capture). Other judgements include their style of writing (which are similar), their complete, total agreement of the block and bad faith against Hollow Wilerding, and the icons – :), :(, :|, etc. – they enjoy featuring in their conversations with others and one another. Please check these two users. Please. 64.231.66.35 00:53, 17 January 2006 (UTC)

Hollow_Wilerding (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)

user:Hollow Wilerding has been blocked for two weeks until 20:00 Jan 15 UTC, but the operator of the account has been continuing to edit during this time through the use of new usernames and anonymous IP's (see Wikipedia:Administrators'_noticeboard/Incidents#Attempting_to_resurrect_Wikipedia_career). Usually the IP's have been in the 64.23... range, but I have a suspicion about 70.27.215.204 (talk · contribs) as [1] and [2] are exactly the same edits that Hollow Wilerding has previously attempted while blocked (see [3] and [4], for example). User's only edit prior to the last few hours was to the page Harajuku Lovers Tour 2005, about a Gwen Stefani concert tour (a substantial number of edits by Hollow Wilerding and his socks/IP's are to Stefani-related articles). The operator of the Hollow Wilerding account has already been told that blocked users aren't supposed to continue to edit anonymously or with new accounts until their block expires. Extraordinary Machine 00:22, 15 January 2006 (UTC)

There is no CheckUser evidence that suggests that 70.27.215.204 (talk · contribs) is connected in any way to Hollow Wilerding (talk · contribs). Kelly Martin (talk) 17:00, 15 January 2006 (UTC)

DickyRobert (talk · contribs)

• Going on several months now, a vandal known only as "User:DickyRobert" has been spamming and vandalising Wikipedia articles, as well as stalking, harassing, and otherwise making threats toward other editors [5] (and administrators). Yesterday I marked over 112 registered accounts as sockpuppets of this person. If someone would work some of their CheckUser magic so that we may determine which ISP(s) are being used in order to put a halt to this ongoing problem it would be greatly appreciated. (Previously requested here.) Best regards, Hall Monitor 21:22, 10 January 2006 (UTC)

It appears that User:Sjakkalle has placed a range block on 142.150.204.0/23. [6] Is this case now considered to be closed, or are you still working your way through the other 108 registered accounts to determine if other service providers are being used as well? Best regards, Hall Monitor 23:17, 11 January 2006 (UTC)

I would consider this one to still be under investigation. I did place a 4 hour block on 142.150.0.0/16 earlier because of related vandalism, but I haven't chased all of the many usernames involved down yet. Kelly Martin (talk) 05:03, 12 January 2006 (UTC)

Attention: The range block may have been ineffective, please investigate recent DickyRobert sockpuppet John Glover Roberts (talk · contribs) for details. Hall Monitor 20:55, 12 January 2006 (UTC)

Sockpuppets of Beckjord: DrJoe, Dr Joe, 205.208.227.49

I'd like to request a check of this group of accounts for sockpuppetry, which has been used to give the illusion of broader support for a position. Beckjord has incessantly added the same unsourced edits to Bigfoot; he has been curiously absent from that article for some time (though still quite vocal on his talk page) while these new users have shown up to revert war and make the same kinds of insults, and using the same idiosyncratic comment style, on Talk:Bigfoot.

• Beckjord (talk · contribs)
  • [7] shows Beckjord inserting typical material on Bigfoot's tracks.
  • [8] shows Beckjord's frequent misuse of Wiki markup. He has a tendency to put smileys on a single line by themselves.
• Dr Joe (talk · contribs)
  • [9] shows edits related to Bigfoot tracks.
  • This user never used a talk page; presumably, this account was created first, and either the password was forgotten, or the presence of a space in the username was forgotten, and DrJoe started editing instead.
• DrJoe (talk · contribs)
  • [10] shows material on Bigfoot's tracks similar to Beckjord's edit.
  • [11] shows this editor claiming to be part of the "DrJoe editing consortium", and also the telltale use of the indented smiley.
• 205.208.227.49 (talk · contribs)
  • [12] shows similar Bigfoot track edits as above.
  • [13] shows this editor now claiming to be someone named "Jeff", also with an indented smiley.

Much more evidence can be provided if required. It will just take a lot of digging through diffs; Beckjord's method of talk page editing makes it very difficult to gather info this way. android79 13:52, 11 January 2006 (UTC)

I agree that Beckjord's use of the socks has meandered into abusive territory at this point, for what it's worth. —Bunchofgrapes (talk) 22:45, 11 January 2006 (UTC)

That Beckjord's IP address is 205.208.227.49 is no great surprise, since he signed several edits with both his name and that IP address. Even assuming that DrJoe and Beckjord were the same editor, I just don't see the evidence of prohibited sockpuppetry, though, so must I decline to provide a statement as to whether Beckjord and DrJoe (or Dr Joe) are the same editor. Kelly Martin (talk) 05:35, 12 January 2006 (UTC)

Fair enough. Thanks for your time, Kelly. If more evidence would convince you to run the check, let me know, though it sounds like you've examined more than just the diffs I've provided here. android79 06:08, 12 January 2006 (UTC)

Zapatancas (talk · contribs)

Has used 2 sockpuppets SquealingPig (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and SquealingPigAttacksAgain (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) to harrass and attack User:SqueakBox, starting within minutes of him having an argument about the way I edited his material. See User:SqueakBox/Zapateron so I would like a sockpuppet check to confirm this. Zapatancas and I are undergoing mediation at the moment so I would be very useful to clarify, SqueakBox 15:35, 11 January 2006 (UTC)

Edits are too far in the past to use CheckUser on. Kelly Martin (talk) 18:55, 11 January 2006 (UTC)

80.202.25.17 (talk · contribs)

Edits of User:80.202.25.17 show striking resemblance with User:80.203.115.12 as well as User:Davenbelle see: [14]. I suspect him of being davenbelle logged off paceing up his stalking campaign slowly although NOTHING remotely colse to what I am used to. It may also be a genuine edit, I just want to rule it out. --Cool Cat^Talk|@ 22:38, 11 January 2006 (UTC)

80.202.25.17 and 80.203.115.12 are in the same dynamic subrange (80.202.16.0 - 80.202.122.255 allocated to Nextgentel Norway) so they could easily be the same editor without any sockpuppetry being involved. Davenbelle has no edits since December 5th, so even if I felt a CheckUser were in order, and I'm not sure that it is, there'd likely be no evidence to investigate. Kelly Martin (talk) 05:07, 12 January 2006 (UTC)

Khoikhoi (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)

I'd like have the logs checked for edits related to this user. Specifically, I noticed 216.38.132.162 (talk · contribs) was making the same edits to Turkish people (edit | talk | history | protect | delete | links | watch | logs | views) as Khoikhoi, which may be an attempt to avoid/evade 3RR (Khoikhoi was blocked recently for 3RR on this article). The IP added back the same block of text that Khoikhoi has. The IP's contrib history shows edits in very similar areas of interest as Khoikhoi's, and also at least one occasion (Ndebele people (South Africa) (edit | talk | history | protect | delete | links | watch | logs | views)) where the IP edited on an article back when Khoikhoi's admitted previous account Hottentot (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was active. I think we need to know if this is a solid match and if any more IPs/accounts are being used. -- Netoholic @ 08:32, 12 January 2006 (UTC)

While I see that this user has been, in the past, blocked for 3RR, that block is expired, and a review of current postings does not show reason to believe that a policy violation is now taking place. I must admit that Khoikhoi's conduct as an editor appears to leave a lot to be desired, but at this time I don't have a policy reason for performing a CheckUser. Kelly Martin (talk) 05:16, 16 January 2006 (UTC)

Goodandevil (talk · contribs), possible sockpuppets 136.215.251.179 (talk · contribs), 84.146.223.17 (talk · contribs), 84.146.200.239 (talk · contribs), 84.146.238.75 (talk · contribs)

There's been repeated edits/vandalism (depending on viewpoint) of Abortion, Samuel Alito, Miscarriage and Kwanzaa from this user and these IPs. We have reason to believe that the IPs and user name belong to one and the same person, as the edits and edit summaries are often of a similar style. The edit summaries are often used to hide the nature of the edit in question, usually by accusing people of POV or simply by making it appear as if it were maintenance according to standard policy. The edits themselves have been of a "right-wing" nature, introducing subtle but apparently deliberate POV into the above articles. He/she is prone to revert wars, as well as accusing admins of bias and violation of policy simply because of a warning. Suggestions have been made that this user is linked to the recent Free Republic incident, in which users at that site were incited to come and "bring balance" to Wikipedia. We need to know if this user name corresponds to any of these IPs, and/or any similar ones. Jamyskis Whisper, Contribs 22:17, 12 January 2006 (UTC)

Adding that the user ignores con, frequently ignores cite, v, and accuracy, has ignored civil, 3rr, etc. Disruptive user. KillerChihuahua^?!? 22:30, 12 January 2006 (UTC)

3RR has now officially been broken on Abortion by user and suspected sockpuppets as of 11:41, 30 May 2024 UTC [refresh], with reverts at least eight times in 24 hours. Jamyskis Whisper, Contribs 05:37, 13 January 2006 (UTC)

The 136. IP is allocated to the US Army 5th Signal Command in Mannheim, Germany; the 84.146. IPs are all part of a dynamic range allocated to a German IP; it is reasonably probable (even without examining CheckUser evidence) that the IPs are all the same person given the edit history of each. I don't seen enough evidence of a policy violation of the sort that would justify using CheckUser to find out if these IPs are being used by Goodandevil. Jamyskis used {{time}} to specify the time of the purported 3RR violation, which really doesn't help matters at all (next time, use subst:), and my own review of the article history does not reveal an obvious 3RR violation. Please lay out the 3RR violation for me. Kelly Martin (talk) 14:15, 13 January 2006 (UTC)

Sorry, forgot the subst: link. It would follow then, based on evidence, that he or she is based in Mannheim then, and later used a computer in a flat or internet café. The 84. IP belongs to T-Online, I know this because I'm an 84. too. I miscounted slightly - at last check, there were seven not eight reverts although not always from the same IP. The text is usually of the same nature but text is usually reincluded as opposed to reverted in the true sense: the wording is always slightly different. Here are the edits in question according to IP:

User:136.215.251.179

Edits at 14:16 and 14:21 reverted by Jamyskis

Edits at 14:26, 14:39 and 14:43 reverted by Jamyskis

Edit at 15:37 reverted by KillerChihuahua

Edits at 16:43, 16:45, 16:52 reverted by Jamyskis

User:84.146.249.98

Edits at 00:00 and 00:02 reverted by Kyd

Edit at 00:14 reverted by Kyd

Edit at 00:22 reverted by Pilotguy

These edits are only the ones that have happened in a 24-hour space - this has been an ongoing topic for a while, beginning with Goodandevil's edits. The UserCheck is needed to see if any action carried out (RfC presumably to begin with) could be extended to the user name if any of the IPs checked out as being identical to Goodandevil. Better to be safe than sorry. Jamyskis Whisper, Contribs 22:21, 13 January 2006 (UTC)

DeveloperFrom1983 (talk · contribs), suspected possible sockpuppet of MathStatWoman (talk · contribs), 151.197.161.81 (talk · contribs)

Appeared to use the sockpuppet to get around 3RR on Apple Computer following an edit dispute. One disappeared as the other appeared, within minutes. There was no edit history of the new user, and immediately similar edits were made to the same article, using similar phrases. I believe in this case it's not a concerted effort to be a nuisance, just a new user that hasn't quite grasped the way things are done, and appeared to be unaware of the 3RR rule and the need to discuss wholesale changes rather than entering into an edit dispute.Graham 22:54, 12 January 2006 (UTC)

CheckUser confirms that DeveloperFrom1983 (talk · contribs) is a sockpuppet of MathStatWoman (talk · contribs). Kelly Martin (talk) 17:11, 15 January 2006 (UTC)

SockpuppetSamuelson (talk · contribs)

Account has large gaps in editing history and is mainly used for AFD voting. By its name, a self-proclaimed sockpuppet. Radiant_>|< 13:14, 13 January 2006 (UTC)

I think the name is intended to be a joke - nobody I can think of would be stupid enough to realistically identify themselves as a sockpuppet, as the point of a sockpuppet is to hide the user's true identity. The edit history seems clean enough - it's irrelevant if he disappeared for a while. I see no cases of vandalism and most of the AfD votes you pointed out seem to be sensible enough and not attempts to derail an AfD. Jamyskis Whisper, Contribs 14:18, 13 January 2006 (UTC)

• The name is possibly a joke, but I can think of several people that would in fact do that in a stroke of irony. He's not a vandal, I can see that, but as most of the account's edits are AFD votes (which is hardly normal behavior for an editor), it raises the concern if he's in fact double-voting. Radiant_>|< 22:02, 13 January 2006 (UTC)

WoW or Marmot? Or someone else?

• User:Hobbo Hotel on Wheels!
• User:On wheels on wheels! On Wheels On Wheels! ON WHEELS ON WHEELS!
• User:PLAGIARISM ON WHEELS
• User:Cool Cat on Frozen Felines
• User:A loud-mouthed extrovert on wheels!

Seems like brions patch to cap the number of usernames that can be created from an IP payed off. However I expect range attacks as thats tipical. Are all fo them originating from the same IP? Is this a known dynamic IP range or is it an open proxy? --Cool Cat^Talk|@ 14:22, 13 January 2006 (UTC)

LawAndOrder (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) - urgent request

Wikipedia:Arbitration Committee Elections January 2006/Vote/LawAndOrder - he seems more like a malicious sockpuppet of someone who knows the workings of Wikipedia, especially to run for ArbCom and know what a CheckUser is with less than 100 edits. This is now an urgent request, pending a possible RFC (User talk:LawAndOrder. NSLE _(T+C) 10:36, 14 January 2006 (UTC)

This edit edits exclusively via an anonymizing proxy (66.90.118.44 (talk · contribs); appears to be Cotse) which I am about to block. Not an open proxy, technically, but problematic enough to block regardless. Kelly Martin (talk) 08:24, 16 January 2006 (UTC)

Wikipedia

Vandalism of Wikipedia by User:King Dickie Roberta, User:The Shinig, User:The Quiet American, User:Mickey Mickey You So Fine, You So Fine You Blow My Mind, Mickey, User:Big Bowski, User:Dirchlet, User:The armpit, User:William Henry Gates. --JWSchmidt 05:47, 15 January 2006 (UTC)